Security Advisory
CVE-2016-10245
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-site scripting or iframe injection.